What we recommend — gear & setup for getting started
New to running your own server? Here’s the opinionated, no-nonsense set of choices we’d make ourselves — hardware, the stack, containers, AI, DNS, remote access and your network. Start small; everything here grows with you.
1. Pick your Mac mini
An Apple Silicon Mac mini is the ideal starter server: tiny, near-silent, sips power, and fast. Buy more memory before more storage — RAM isn’t upgradeable later, but you can always add a Thunderbolt SSD.
| Use-case | Mac mini | Memory | Storage | Why |
|---|---|---|---|---|
| First steps — a blog & one small site | M4 (base) | 16 GB | 256–512 GB | Plenty for Apache/PHP/MySQL and a few sites. Quiet, ~5 W idle. |
| Home lab & self-hosting | M4 | 24 GB | 1 TB + external | Room for Plex/Jellyfin, Home Assistant and a stack of containers. Add external storage for media. |
| Small business / storefront | M4 | 24–32 GB | 1 TB | Comfortable for several always-on production services plus backups. |
| Web development | M4 / M4 Pro | 32 GB | 1 TB | Many vhosts and container stacks side by side without swapping. |
| Local AI / LLMs | M4 Pro | 48–64 GB | 1–2 TB | Unified memory is the limit for local models — more RAM runs bigger models; the Pro’s bandwidth helps. |
| Agency / fleet hub | M4 | 16–24 GB | 512 GB | The Mac mostly orchestrates over SSH; the heavy lifting runs on the fleet. |
2. The web stack — Apache & MySQL, or something else?
Start with Apache + MySQL + PHP. It’s the best-trodden path — every CMS and tutorial assumes it, and FrontierStack sets it up with one click. Branch off only when you have a reason:
- Nginx if you mostly serve static files or reverse-proxy Node/Python apps and want the lightest footprint.
- PostgreSQL over MySQL when your app needs advanced SQL, rich JSON or GIS; otherwise MySQL is the easy default.
- Add Redis for caching and sessions once you actually need it.
3. Containers — pick by need
FrontierStack manages all of these from one Containers pane (start/stop, logs, exec, Compose). Our default is OrbStack; choose another only for a specific reason:
| Pick | Choose it when… | Notes |
|---|---|---|
| OrbStack ⭐ | Everyday Mac development — our default. | Fast, light, low battery use; runs Docker + Linux VMs. |
| Docker Desktop | You want the reference Docker experience or Kubernetes / team parity. | Heavier; check licensing for larger companies. |
| Apple container runtime | macOS 26+ and you want an Apple-native, no-third-party option. | Newer; great for simple single-container needs. |
| Colima | You want free, CLI-only and scriptable. | Minimal, no GUI. |
4. Recommend an AI provider
The AI Administrator runs on whatever you like. Our picks:
- FrontierStack AI as the easiest cloud default — its Qwen3 engine needs no provider key of your own and FrontierStack AI server use is free for now.
- Ollama (local) if you want everything to stay on your Mac — no API key, no network, nothing redacted.
- OpenRouter if you want one key for many models. OpenAI, Google Gemini and more are supported too — 16 providers plus local.
Tip: FrontierStack’s AI cost monitor tracks your subscriptions and API spend in one place, so you can start on a flat-rate plan and watch it.
5. Get a (free) Cloudflare account
A free Cloudflare account is the backbone of a home server: free DNS, a free Tunnel to publish a site with no open ports, CDN/caching, and DDNS so your domain follows a changing home IP. FrontierStack drives zones, DNS, cache and tunnels directly, so you rarely touch their dashboard. The free plan is plenty to start.
6. For remote control — install Tailscale
To reach your Mac and servers from anywhere, install Tailscale. It builds a private WireGuard network between your devices with no port-forwarding and no public exposure — your phone, laptop and servers act like they’re on one LAN. It’s free for personal use, and FrontierStack can set it up on your servers and router (even as a subnet router for devices that can’t run it). The free iOS app connects over it too. Prefer agentless, browser-based access? A Cloudflare Tunnel is the alternative.
7. Level up your network — OPNsense
When you’re ready to take the network seriously, run OPNsense — a free, open-source firewall/router OS on a small fanless box (or a VM). It gives you real firewall rules, VLANs, VPN and visibility a consumer router can’t. FrontierStack integrates with OPNsense over its REST API, so you can read status and set up Tailscale subnet routing from the app. pfSense, OpenWrt and MikroTik are supported too if that’s what you have.
None of this is required to start — a Mac mini and the free tier of Cloudflare and Tailscale will take you a long way. Add the rest when you outgrow it.
Run it all from one Mac app.
FrontierStack installs, monitors and secures the whole stack — locally and across your fleet — from a single native macOS app.
Download FrontierStack